12919 matches found
CVE-2026-24841_Range
This repository does not have a README...
CVE-2026-24061-GNU-inetutils-Telnet-Detector
CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive detection tool for identifying potential exposure to CVE-2026-24061 , a vulnerability affecting certain versions of GNU inetutils telnet. This project is designed for DevOps pipelines , infrastructure audits , and defensive security...
BlueCloud
Resumen Despliegue de Cyber Range de HELK y Velociraptor. Implementación automatizada con Terraform de un sistema que ejecuta el servidor HELK + Velociraptor con un endpoint Windows registrado en Azure o AWS. Una colección de scripts de Terraform y Ansible que implementan automáticamente y...
ncrack
ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...
MS15-034
MS15-034 MS15-034 POC La versión actual del servidor IIS es una versión vulnerable que contiene la vulnerabilidad conocida CVE-2015-1635, MS15-034. Al explotar esta vulnerabilidad, existe el riesgo de sufrir ataques como ejecución remota de código o provocar una pantalla azul. Sintaxis de prueba:...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
iptodomain
iptodomain V2 Update V2 :It was migrated from python 2.7 to 3.8.10. Now It supports an input file and csv output file. Description: This tool allows you to extract domains from a IP range, using the historic information archived in Virustotalusing API key. It is usefull if you want to know what...
Mongodb-Redis-scan
Mongodb-Redis-scan mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis. This script was written for a previous requirement, and now it is shared for everyone to learn and...
killosx
killosx Usa el exploit de Apple CoreText CVE-2012-3716 y lanza un AP para afectar a todos los dispositivos Apple vulnerables dentro del alcance wifi. Instalación: Ejecuta 'make install' en el directorio de killosx. Ahora killosx se puede ejecutar desde cualquier lugar con 'killosx'. Uso: killOSX...
CVE-2024-29943
CVE-2024-29943 Un bug de JIT de SpiderMonkey de Pwn2Own: Desde inconsistencia en el rango de enteros hasta eliminación de comprobación de límites y luego RCE. Este repositorio contiene PoC, Exploit y Diapositivas de Análisis para CVE-2024-29943. Demo Demo.mp4 Diapositivas Slides.pdf Información...
attack_range
Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...
attack_range
Splunk Attack Range v5 El Splunk Attack Range construye entornos cloud instrumentados AWS, Azure, GCP, simula ataques y reenvía datos a Splunk para el desarrollo y pruebas de detección. Qué hace: Construye laboratorios — Despliega un laboratorio pequeño y similar a producción Splunk, servidores...
CVE-2021-41278
CVE-2021-41277 Metabase arbitrary file read vulnerability batch scanning tool Affected versions: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Usage usage: CVE-2021-41277.py -h -u URL -f FILE CVE-2021-41277 optional arguments: -h, --help show this help message and exit -u URL, --ur...
CVE-2020-17519-Apache-Flink
CVE-2020-17519 Apache Flink lectura arbitraria de archivos Alcance afectado Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Uso del script python3 CVE-2020-17519 --help Ver ayuda de uso python3...
laravel-phpunit-rce-masscaner
laravel phpunit rce masscanner CVE-2017-9841 Escáner masivo para Laravel phpunit RCE CVE-2017-9841 dependencias python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Uso usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help messag...
CVE-2023-23946
CVE-2023-23946 Exploit Functional, self-developed Proof-of-Concept PoC exploit for CVE-2023-23946 , a path traversal vulnerability in Git affecting versions prior to 2.39.2, 2.38.4, 2.37.6, etc. that allows writing files outside the working tree via crafted patches during git apply. Contains a...
robodroid
RoboDroid RoboDroid es una herramienta de software de vanguardia diseñada para simplificar el proceso de gestionar y muy pronto también desplegar máquinas Android para su uso en entornos de Cyber Range. Con RoboDroid, los usuarios pueden configurar y personalizar fácilmente comportamientos...
cve-2022-42889
cve-2022-42889 cve-2022-42889 Text4Shell afecta a Apache Commons Text versiones 1.5 a 1.9. Se ha parcheado a partir de la versión 1.10 de Commons Text. referencias: https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-doc...
mwebfp
LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...
CVE-2017-7529
Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...